[170604] in North American Network Operators' Group
RE: BGPMON Alert Questions
daemon@ATHENA.MIT.EDU (Frank Bulk)
Wed Apr 2 15:01:06 2014
From: "Frank Bulk" <frnkblk@iname.com>
To: "'Joseph Jenkins'" <joe@breathe-underwater.com>,
<nanog@nanog.org>
In-Reply-To: <CACUUO4Gc6itVxCQJsEiT_FXAbvm_vSRoQy7o7S1fy_GcrY291Q@mail.gmail.com>
Date: Wed, 2 Apr 2014 13:59:12 -0500
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
I received a similar notification about one of our prefixes also a few
minutes ago. I couldn't find a looking glass for AS4761 or AS4651. But I
also couldn't hit the websites for either AS, either.
Frank
-----Original Message-----
From: Joseph Jenkins [mailto:joe@breathe-underwater.com]
Sent: Wednesday, April 02, 2014 1:52 PM
To: nanog@nanog.org
Subject: BGPMON Alert Questions
So I setup BGPMON for my prefixes and got an alert about someone in
Thailand announcing my prefix. Everything looks fine to me and I've
checked a bunch of different Looking Glasses and everything announcing
correctly.
I am assuming I should be contacting the provider about their
misconfiguration and announcing my prefixes and get them to fix it. Any
other recommendations?
Is there a way I can verify what they are announcing just to make sure they
are still doing it?
Here is the alert for reference:
Your prefix: 8.37.93.0/24:
Update time: 2014-04-02 18:26 (UTC)
Detected by #peers: 2
Detected prefix: 8.37.93.0/24
Announced by: AS4761 (INDOSAT-INP-AP INDOSAT Internet Network
Provider,ID)
Upstream AS: AS4651 (THAI-GATEWAY The Communications Authority of
Thailand(CAT),TH)
ASpath: 18356 9931 4651 4761